[Samba] Problem after update version 4.15.0

[L.P.H. van Belle]

This.
> ../../source4/auth/ntlm/auth.c:241(auth_check_password_send)
>    auth_check_password_send: Checking password for unmapped user 
> [CYBERDYNE]\[CYB64W10-TEST$]@[CYB64W10-TEST]

I would have expected
> [CYBERDYNE]\[CYB64W10-TEST$]@[AD.CYBERDYNE.LOCAL]

I see this so now and then here also that, suddenly a computer/user cant login.
Common causes.. 
1) PC time out of sync with DC.
2) Computer account its password expired.
3) Lots domain trust. 

But what does the evenlog show and i assume the same user on an other computer can login?

> I also compared "samba-tool computer show" of a working and one 
> non-working machine and can't find any differences other than 
> timestamps.
Hmm, is this an "old" domain, like from before 4.9? 

Did you use 
'samba-tool dns zoneoptions' for aging control
----------------------------------------------
Or 
Marking old records as static or dynamic with 'samba-tool'

>From : https://www.samba.org/samba/history/samba-4.15.0.html 

If i have to gamble on this, 2 options.
Windows 10 bug or Samba fix in 4.15 that triggered it. 

And if you dont want to re-register 1 pc.. 
(You can do this with a script at login for the whole domain. )

Increase the debugging and post it, maybe we see more in these loggings.

Greetz, 

Louis



> -----Oorspronkelijk bericht-----
> Van: rme at bluemail.ch [mailto:rme at bluemail.ch] 
> Verzonden: woensdag 29 september 2021 9:50
> Aan: L.P.H. van Belle; samba at lists.samba.org
> Onderwerp: Re: [Samba] Problem after update version 4.15.0
> 
> Hi Louis
> 
> On 29.09.2021 09:23, L.P.H. van Belle via samba wrote:
> > The computer password is expired.
> > You can try, Remove the pc from domain and rejoin.
> > 
> > And did you verify if the computer time is in sync with AD.
> 
> Where can I check this? And why does it not happen on Samba 4.14.7?
> 
> In fact I can perfectly use the computer account when downgrading to 
> 4.14.7. I did the upgrade, test, downgrade cycle a couple of times 
> already. Samba 4.14.7 always working finde and Samba 4.15 
> claiming the password to be wrong (wrong, not expired).
> 
> If expiration is a problem the question is how the password can be 
> renewed without having to re-join the machine - before the upgrade of 
> course.
> 
> I don't want to lose 80% of my machines after Samba 4.15 upgrade 
> blocking my users to log in and then having to re-join all 
> the machines 
> which work perfectly fine on Samba 4.14.7.
> 
> best regards,
> Rainer
> 
>